======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 15:30:07 on 04/07/2011, Normal boot Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) aaa@AAA-47FB55C50EE ( ) ============== SEARCH ============== File found: C:\Documents and Settings\aaa\Dane aplikacji\Readar_sl.exe Folder found: C:\Program Files\AskSearch Folder found: C:\Documents and Settings\aaa\Dane aplikacji\ShoppingReport2 Folder found: C:\Documents and Settings\All Users\Dane aplikacji\Trymedia -- File opened: C:\Documents and Settings\aaa\Dane aplikacji\Mozilla\FireFox\Profiles\j5ud4lpx.default\Prefs.js -- Line found: user_pref("browser.search.selectedEngine", "qooqlle"); Line found: user_pref("browser.startup.homepage", "hxxp://www.qooqlle.com/"); -- File closed -- Key found: HKLM\Software\Classes\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8} Key found: HKLM\Software\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C} Key found: HKLM\Software\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C} Key found: HKLM\Software\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6} Key found: HKLM\Software\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872} Key found: HKLM\Software\Classes\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA} Key found: HKLM\Software\ClickPotatoLite Key found: HKLM\Software\Conduit Key found: HKLM\Software\MyGlobalSearch Key found: HKLM\Software\ShoppingReport2 Key found: HKLM\Software\Trymedia Systems Key found: HKCU\Software\ShoppingReport2 Key found: HKCU\Software\AppDataLow\AskSA Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{100EB1FD-D03E-47FD-81F3-EE91287F9465} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{100EB1FD-D03E-47FD-81F3-EE91287F9465} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} Key found: HKLM\Software\Microsoft\Internet Explorer\Extensions\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} Key found: HKLM\Software\Microsoft\Internet Explorer\Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6} Value found: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Readar_sl Value found: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{C94E154B-1459-4A47-966B-4B843BEFC7DB} ============== ADDITIONNAL SCAN ============== -- C:\Documents and Settings\aaa\Dane aplikacji\Mozilla\FireFox\Profiles\j5ud4lpx.default -- Searchplugins\search.xml (?) Prefs.js - browser.search.selectedEngine, qooqlle Prefs.js - browser.startup.homepage, hxxp://www.qooqlle.com/ Prefs.js - browser.startup.homepage_override.mstone, false ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://www.qooqlle.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_URLSearchHooks|{C94E154B-1459-4A47-966B-4B843BEFC7DB} - "DefaultSearchHook Class" (C:\Program Files\AskSearch\bin\DefaultSearch.dll) HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=crm&q={searchTer...) HKCU_SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420} - "Ask Search" (hxxp://toolbar.ask.com/toolbarv/askRedirect?gct=&gc=1&q={searchTerms}&crm=1&tool...) HKLM_ElevationPolicy\4cfe4df7-32cc-4ea9-bc4a-9215da08184b - C:\Program Files\PHPNukeEN\PHPNukeENToolbarHelper.exe (x) HKLM_Extensions\{58ECB495-38F0-49cb-A538-10282ABF65E7} - "Kolekcja wycinków HP" (C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,207) HKLM_Extensions\{700259D7-1666-479a-93B1-3250410481E8} - "Zaznaczanie HP Smart" (C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,209) HKLM_Extensions\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} - "ShopperReports - Compare product prices" (C:\Program Files\ShoppingReport2\Bin\2.7.27\ShoppingReport.dll,203) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) HKLM_Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6} - "ShopperReports - Compare travel rates" (C:\Program Files\ShoppingReport2\Bin\2.7.27\ShoppingReport.dll,201) BHO\{053F9267-DC04-4294-A72C-58F732D338C0} - "HP Print Clips" (C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 04/07/2011 15:30:13 (3464 Byte(s)) End at: 15:30:38, 04/07/2011 ============== E.O.F ==============